A company's web application is deployed on Amazon EC2 instances behind a public Application Load Balancer. The application flags malicious requests and uses an AWS Lambda function to add the offending IP addresses to the network ACL to block any further requests for 24 hours. Recently, the application has been receiving more malicious requests, which causes the network ACL to reach its limit of allowed entries.
Which action should be taken to block more IP addresses, without compromising the existing security requirements?

Question

A company's web application is deployed on Amazon EC2 instances behind a public Application Load Balancer. The application flags malicious requests and uses an AWS Lambda function to add the offending IP addresses to the network ACL to block any further requests for 24 hours. Recently, the application has been receiving more malicious requests, which causes the network ACL to reach its limit of allowed entries.

Which action should be taken to block more IP addresses, without compromising the existing security requirements?

Martinho Hinterholz · Accepted Answer

Update the AWS Lambda function to add an additional network ACL to the subnets once the limit for the previous ones has been reached.

Martinho Hinterholz · Answer

Update the AWS Lambda function to remove blocked entries from the network ACL after 2 hours.

Martinho Hinterholz · Answer

Update the AWS Lambda function to block malicious IPs in security groups rather than the network ACL.

Martinho Hinterholz · Answer

Update the AWS Lambda function to block malicious IPs in AWS WAF attached to the Application Load Balancer.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 221 - ANS-C00 discussion

Suggested answer: D

0 comments